Last updated: 11 February 2025
1. Data Controller
Decima (DECIMA2 Ltd) (“we”, “us”, “our”) is the data controller responsible for your personal data.
3 Kings Meadow, Osney Mead
Ferry Hinksey Road
Oxford, England, OX2 0DP
Email: support@decima2.co.uk
2. Data We Collect
- Contact information — email address and name when you subscribe to our newsletter or submit a form.
- Website URLs — URLs you provide when requesting a growth plan or audit.
- Usage data — pages visited, referring source, device type, and browser, collected via analytics tools (see Section 4).
- Session recordings — anonymised recordings of clicks, scrolls, and mouse movements via Microsoft Clarity (see Section 4).
3. How We Use Your Data
We process your data for the following purposes:
- To respond to enquiries and deliver requested services.
- To send marketing communications you have opted into (via Beehiiv).
- To improve our website, content, and user experience.
- To comply with legal obligations.
4. Cookies & Tracking Technologies
We use the following tools, subject to your consent preferences:
Google Analytics 4 (GA4)
Collects anonymised usage data such as page views, session duration, and traffic sources to help us understand how visitors use our site.
Microsoft Clarity
Records anonymised session replays — including clicks, scrolls, and mouse movements — so we can identify usability issues. Clarity does not collect passwords or payment information.
Google Tag Manager (GTM)
Manages the deployment of the analytics and marketing tags listed here. GTM itself does not collect personal data.
You can manage your cookie preferences at any time using the cookie banner or by contacting us.
5. Third-Party Services
We share data with the following processors, each under appropriate safeguards:
- Beehiiv — newsletter delivery and subscriber management.
- Calendly — meeting scheduling.
- Google (GA4 & GTM) — analytics and tag management.
- Microsoft Clarity — session recording and heatmaps.
- ipapi.co — IP-based geolocation for regional content customisation.
6. Data Retention
We retain personal data only as long as necessary to fulfil the purposes described above, or as required by law. Newsletter subscriber data is retained until you unsubscribe. Analytics data is retained according to each provider’s default retention settings (typically 14 months for GA4).
7. Your Rights (GDPR)
Under the UK and EU General Data Protection Regulation you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data (“right to be forgotten”).
- Restrict or object to processing.
- Data portability — receive your data in a machine-readable format.
- Withdraw consent at any time without affecting prior processing.
To exercise any of these rights, email support@decima2.co.uk. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
8. International Transfers
Some of the third-party services listed above process data outside the UK/EEA (primarily in the United States). Where this occurs, transfers are protected by Standard Contractual Clauses or equivalent safeguards recognised by the UK ICO.
9. Children’s Privacy
Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us so we can delete it promptly.
10. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via a notice on our website. The “Last updated” date at the top reflects the most recent revision.
11. Contact Us
If you have questions about this privacy policy or how we handle your data, please contact us at support@decima2.co.uk.